Enterprise-class network management solutions often take completely different technical approaches to monitoring the network. The network admin’s requirements are also broadening year over year as more and varied infrastructure is dropped on their plate, including virtualized infrastructure, storage, line-of-business application performance and uptime.

Many environments have multiple monitoring platforms running simultaneously that have grown out organically as a result of new infrastructure being added on a rolling basis. Keeping on top of reporting, alert response, blind spots and the like can be an all-consuming effort. Obviously, a ‘single window view’ of the entire monitored infrastructure, network (physical and software-defined), virtual, storage, and application, would go a long way to reducing complexity and increasing service levels across the environment.

In response to these challenges, network management vendors have been rapidly expanding their offerings to fill in the blanks in their platforms to ensure they’re covering the full breadth of customer requirements. Some vendors, like Solarwinds, have done this via acquisition and integration (buying companies that have the pieces they’re missing and blending the acquired systems into in-house platforms), while others, like SevOne, have tried to build as much as they can in-house and then partnered with or white-labeled other companies’ products to meet demands for an expanded feature set.

Additionally, some vendors have elected for an ‘all-in’ approach, endeavouring to manage all virtual, storage, application and network aspects of the environment via a single solution (even including a hardware appliance as in the case of SevOne) while others, like Solarwinds, have a more modular approach where they try to go deeper into each individual aspect of the environment with dedicated software-based products and then tie the modules back together for a single window view.

In this comparison, we try as best we can to compare two popular platforms (SevOne and Solarwinds Network Performance Monitor) to help you discern their strengths and weaknesses and determine which would be the best fit for your particular environment and budget. To begin with however, here’s an overview of some of each product’s strengths and differentiators…

Each of these additional, complimentary products offer advantages in their own right, specifically the depth of support for application KPIs monitored (in the case of Server & Application Monitor) and direct-talk capability their Virtualization Manager has with VMware vCenter, to mention just a couple of examples. Of course, with additional products to round out the feature set, you also have higher total licensing costs, so it becomes a bit of a depth of functionality vs. cost equation. (Starting cost estimates for the additional complimentary products to NPM are listed in the feature comparison below.)

SevOne 5.3: Overview

SevOne is a somewhat different animal. Their hardware appliance-based approach involves dropping in a single all-inclusive appliance into the datacenter to start, with additional scalability achieved by adding additional appliances as demand dictates (for instance customers can also deploy a virtual appliance that monitors up to 20,000 objects). Network-wide reporting is accomplished from any of the appliances in the group – or “Cluster,” as SevOne refers to it.

Rather than provide specialized standalone products for each of the major non-network specific monitoring aspects (virtualization, application, NetFlow, storage) SevOne monitors these aspects in the core platform. This has obvious cost advantages and reduces the amount of overall licensing and patching to stay on top of. Costs are further reduced without the need for server hardware (unless you’re running it in a VM) and a Windows Server license.

SevOne has also focused on adding some interesting features that differentiate their platform. Here’s a few notable examples:

One-click Metric-to-Flow: Because NetFlow is not a separate module in SevOne, the product features one click metric-to-flow reporting. For example, SNMP or IP SLA metrics that tell you when and where something occurred may be linked to NetFlow records to reveal the who and what in the troubleshooting process — all from the same dashboard, without having to tab to a different screen.

Synthetic Indicators and Custom Calculations: Synthetic Indicators perform simple math on multiple metrics collected from a single monitored object. For example, when polling interfaces, you may view in bytes and out bytes, but polling total bytes is not an option. To address this visibility gap, SevOne provides Synthetic Indicators that allow you to combine, report, and alert on the sum of those data sources to provide a real-time view of total bytes consumed for a particular link even though this value does not exist in the MIB of the target device.

You can also use Synthetic Indicators to monitor and compare ratios of items such as connections succeeded vs. connections failed or packets sent vs. errors received. For example, you can compare how many packets were transmitted in the past minute and how many errors were generated. If 5% of all packets pushed are resulting in error, you know there is an issue to address. In essence, Synthetic Indicators allow you to create new KPIs that do not currently exist on the device. In situations where you need to view summarized data across multiple objects or multiple synthetic indicators, SevOne provides a GUI interface that allows you to create Custom Calculations. Custom Calculations can also combine metrics from different data sources, such as WMI and SNMP. Custom Calculations help compare site response times, understand total application bandwidth, support usage-based billing, and assess the effectiveness of load balanced environments, among other things.

Data Retention: Likely due to the dedicated hardware appliance, SevOne is able to maintain a year of as-polled data, without the need to average or aggregate performance metrics over time (for example, some products only maintain detailed statistics for 7 days before they roll-up into less accurate hourly or daily averages). This offers a fairly high level of granularity in the available reporting.

On With Our Comparison…

So, overviews aside, how do each of the platforms compare based on our NetworkManagementSoftware.com evaluation criteria? Have a look…

SevOne 5.3

Solarwinds Network Performance Monitor 10.5

Software or Appliance Based?

Hardware Appliance-Based. The SevOne appliance acts as the poller, collector, database, and alerting/reporting engine. A virtual appliance that monitors up to 20,000 objects is also available.

SNMP, NetFlow, VM Monitoring, WMI, HTTP, JMX, IP Telephony (VoIP), Cisco CallManager, Medianet, DNS, Proxy Ping and ICMP, IP SLA, NBAR, IPFIX, Port Shaker, MySQL, NAM and others.See this for more detail on supported protocols and 3rd party integrations and compatibility.
In addition to the supported protocols and technologies listed above, SevOne can bring in any time-based third party data for baselining, alerting, and reporting eg., temperature data from inside and outside the data center or transactional data.
SevOne also has partnerships with organizations such as ExtraHop, Accedian, and Emulex (Endace) to support integrations with their platforms.
In addition, specialized adaptors (referred to as xStats) have been developed to pull metrics from vendor EMS’s such as Alcatel-Lucent, Cisco, Ericsson, Bridgewater and more when traditional SNMP polling is not an option.

Yes. SevOne provides status maps for viewing a snapshot of infrastructure health. Maps may represent a device, data center, geography, etc. with indicators on the map that reveal alerts and allow for drill-down into performance detail.

Solarwinds' 'Network Atlas' enables you to create your network map locally on a desktop PC and then export the map to Network Performance Monitor where it is immediately updated with the current status of the added nodes.

Syslog

Yes - with the addition of the SevOne Performance Log Appliance (PLA). SevOne automatically correlates performance metrics with unstructured log data, eliminating the need for time-consuming search practices. SevOne also baselines log data and alerts on baseline deviation and first occurrence of a unique log.

Yes

SNMP Logging

Yes

Yes

Route Monitoring

Yes. SevOne gathers stats on major routing protocols, including route counts. Flow reporting can be enhanced with BGP AS names and MPLS VRF information.

Available views include multicast data only and allow for the creation of groups specifically for multicast nodes. SolarWinds NPM also provides a visual representation in the form of a network multicast topology map.

Virtual Interface & Device Monitoring Support

Yes

Yes

Trend Prediction

Yes. Predictive determination of the next resource to reach max utilization and how much time may remain until upgrades will be required. In addition to general purpose reporting options -- such as TopN tables and alerts based on deviation from "normal" baseline performance of any KPI -- SevOne uses the following trend projection techniques:
• Linear regression
• Polynomial regression
• Exponential regression
• Logarithmic regression

No

Agentless

Yes

Yes

Cisco UCS Support

Yes. SevOne also monitors the health of the primary and secondary fabric switches, the performance of the Fibre Channel ports and port channel interconnects, and per server CPU.

Yes. SevOne hardware monitoring is vendor agnostic, providing metrics for CPU, memory, disk, interfaces, power supply, fans, temperature, and all other components.
All metrics are automatically baselined on a rolling 10 week period, allowing for intelligent thresholds and alerting when performance deviates from expected behavior.

Yes. Monitoring for device sensors including temperature, fan speed, and power supply with alerting if user-defined thresholds are crossed.

Application Monitoring

Yes. Synthetic IP SLA tests (which can be configured within the SevOne GUI) measure application response times, whether that application is on premise or hosted in the cloud. SevOne can collect additional application metrics from JMX and WMI (both supported out of the box) and monitors various databases, such as mySQL, Oracle, and DB2.
For VoIP applications, SevOne includes out-of-the-box support for Cisco, Avaya, Asterix, and SIP compatible systems like Aastra, Polycom, Linksys, and others, and provides metrics for MOS, R-Value, jitter, latency, and packet loss with best and worst call reports.
In load balanced environments, SevOne also monitors the load balanced applications, including the load balancer itself, the ratio of session counts between the load balancer and the individual servers in the pool, storage access, etc.
Additionally, the SevOne APA (Application Performance Appliance) works off the span port to convert packet data into NetFlow records, which are fed into the SevOne PAS (Performance Appliance Solution) for troubleshooting and reporting.

A complete list of what application metrics can be monitored via their Server & Application Monitor add-on is available here.

Virtualization Monitoring

Yes. SevOne includes VMware support, allowing users to not only see VM performance metrics, but also how the VMs affect the physical host performance (for example, % of the host memory consumed by the VM).
When a process issue is detected, the user is redirected to the NetFlow records for that VM to help identify who or what was "talking" at the time the issue occurred.

Yes. SevOne monitors up to 200,000 objects per appliance. Multiple appliances may be peered together in a SevOne Cluster(TM) to monitor millions of objects with no degradation to speed of the monitoring system or reporting.
Each appliance features 300 multi-threaded pollers for fast, accurate performance with the high frequency object polling down to one second intervals, providing much more granular views for low-latency networks.

Yes. Requires the separate purchase of Solarwinds Orion Scalability Engine to distribute polling across multiple servers. Most customers will be able to monitor about 10,000 elements per polling engine (main or additional) with standard polling intervals.

Available Addon Modules

All modules included out-of-the-box. There are additional appliances for specific needs, but no additional modules are required for performance management.
Additional SevOne products include:SevOne APA (Application Performance Appliance) - works off the span port to convert packet data into NetFlow records, which are fed into the SevOne PAS (Performance Appliance Solution) for troubleshooting and reporting.
SevOne DNC (Dedicated NetFlow Collector) - for organizations with heavy flow demands, the DNC feeds flow records into the PAS for reporting and analysis.
SevOne HSA (Hot Standby Appliance) - maintains a secure backup of performance history in the event of system disruption or failure.

Yes. With SevOne, dashboards and reports are essentially the same (reports are PDF exports). User-customizable configuration of data sources, settings, time frames, visualizations, and summary information.

Yes. SevOne allows for flexibility in building dashboards and reports, in addition to numerous pre-built TopN and flow reports. Up to 200 objects may be included in a single dashboard/report, with report compilation time typically a few seconds.
Reports can include:
• Performance metrics such as SNMP, IP SLA, and JMX
• Third party data from network probes, proprietary business applications, and element management systems (EMS)
• Flow data, such as NetFlow, sFlow, jFlow, and IPFIX
• Status maps with physical and geographic layouts of your network
• Device configuration information
• Fault data from traps and threshold alarms
• TopN statistics used for capacity planning and monthly overviews
• Synthetic Indicators and Custom Calculations created by your business
There is no distinction drawn between aggregated statistical report visualization and fine-grained graphs – users can “zoom” in to see individual polled values or flow records with the Web UI. Reports access up to a year of as-polled data, vs. just averaged or aggregated data.

Yes. Network Performance Monitor ships with numerous built-in reports, allowing for reporting on performance data over specific time periods or by network segment.

SevOne triggers alerts based on threshold violations, whether threshold levels are static or deviations from "normal" baseline performance. SevOne automatically baselines every metric it collects on a rolling 10 week cycle for every 15 minute period. If performance of an object deviates from historical norms at that given time and day (based on a # of standard deviations), SevOne triggers an alert.
Both above and below thresholds are allowed. Allows intelligent thresholds/alerts on any time-based third party data that is brought into the system, not just the SevOne polled metrics.

Configure network alerts for correlated events (alert if X and Y are true) and sustained conditions (alert if Y is true for more than 5 minutes). Escalate network alerts automatically through a variety of alert delivery methods.

Iphone/Smartphone Access

Yes. The SevOne mobile app runs on both the Apple iOS and Android platforms. It allows users to view real time status of the health of their network, drill down into the details behind alerts, and acknowledge, ignore, or assign alerts to others for resolution.

Mobile web view only.

Licensing & Pricing

Live Demo Environment Available for Eval?

SevOne makes an appliance available on a Proof of Concept basis for prospects. The free download is also available, though it may not be running the most recent version of SevOne, and it does not include NetFlow capability.

Site Info

Real-Time Bandwidth Monitor makes it easy to keep a close eye on a troublesome interface and monitors the bandwidth usage in real-time!•Poll bandwidth usage in intervals as frequent as half a second•Monitor multiple interfaces simultaneously•View interface bandwidth usage in an easy-to-understand graph